-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Aug 2017 12:25:57 +0200
Source: git-annex
Binary: git-annex
Architecture: source amd64
Version: 6.20170818-1
Distribution: unstable
Urgency: high
Maintainer: Richard Hartmann <richih@debian.org>
Changed-By: Richard Hartmann <richih@debian.org>
Description:
git-annex - manage files with git, without checking their contents into git
Changes:
git-annex (6.20170818-1) unstable; urgency=high
.
* Package 6.20170818-1
.
git-annex (6.20170818) unstable; urgency=high
.
* Security fix: Disallow hostname starting with a dash, which
would get passed to ssh and be treated an option. This could
be used by an attacker who provides a crafted repository url
to cause the victim to execute arbitrary code via -oProxyCommand.
(The same class of security hole recently affected git itself.)
* git-annex.cabal: Deal with breaking changes in Cabal 2.0.
* Fix build with QuickCheck 2.10.
* fsck: Support --json.
* move, copy: Support --batch.
* Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
override the default timestamps used in log files in the git-annex
branch. This is a dangerous environment variable; use with caution.
* Fix a git-annex test failure when run on NFS due to NFS lock files
preventing directory removal.
* test: Avoid most situations involving failure to delete test
directories, by forking a worker process and only deleting the test
directory once it exits.
* Disable http-client's default 30 second response timeout when HEADing
an url to check if it exists. Some web servers take quite a long time
to answer a HEAD request.
* Added remote configuration settings annex-ignore-command and
annex-sync-command, which are dynamic equivilants of the annex-ignore
and annex-sync configurations.
* Prevent spaces from being embedded in the name of new WORM keys,
as that handing spaces in keys would complicate things like the
external special remote protocol.
* migrate: WORM keys containing spaces will be migrated to not contain
spaces anymore.
* External special remotes will refuse to operate on keys with spaces in
their names. That has never worked correctly due to the design of the
external special remote protocol. Display an error message suggesting
migration.
* Fix incorrect external special remote documentation, which said that
the filename parameter to the TRANSFER command could not contain
spaces. It can in fact contain spaces. Special remotes implementors
that relied on that may need to fix bugs in their special remotes.
* Fix the external special remotes git-annex-remote-ipfs,
git-annex-remote-torrent and the example.sh template to correctly
support filenames with spaces.
* Windows: Win32 package has subsumed Win32-extras; update dependency.
.
git-annex (6.20170520) unstable; urgency=medium
.
* move --to=here moves from all reachable remotes to the local repository.
* initremote, enableremote: Support gpg subkeys suffixed with an
exclamation mark, which forces gpg to use a specific subkey.
* Improve progress display when watching file size, in cases where
a transfer does not resume.
* Fix transfer log file locking problem when running concurrent
transfers.
* Avoid concurrent git-config setting problem when running concurrent
threads.
* metadata: When setting metadata of a file that did not exist,
no error message was displayed, unlike getting metadata and most other
git-annex commands. Fixed this oversight.
* Added annex.resolvemerge configuration, which can be set to false to
disable the usual automatic merge conflict resolution done by git-annex
sync and the assistant.
* sync: Added --no-resolvemerge option.
* Avoid error about git-annex-shell not being found when
syncing with -J with a git remote where git-annex-shell is not
installed.
* Fix bug that prevented transfer locks from working when
run on SMB or other filesystem that does not support fcntl locks
and hard links.
* assistant: Merge changes from refs/remotes/foo/master into master.
Previously, only sync branches were merged. This makes regular git push
into a repository watched by the assistant auto-merge.
* Makefile: Install completions for the fish and zsh shells
when git-annex is built with optparse-applicative-0.14.
* assistant: Don't trust OSX FSEvents's eventFlagItemModified to be called
when the last writer of a file closes it; apparently that sometimes
does not happen, which prevented files from being quickly added.
.
git-annex (6.20170519) unstable; urgency=medium
.
* Ssh password prompting improved when using -J for concurrency.
When ssh connection caching is enabled (and when GIT_ANNEX_USE_GIT_SSH
is not set), only one ssh password prompt will be made per host, and
only one ssh password prompt will be made at a time.
* When built with concurrent-output 1.9, ssh password prompts will no
longer interfere with the -J display.
* Removed dependency on MissingH, instead depending on the split library.
* Progress is displayed for transfers of files of unknown size.
* Work around bug in git 2.13.0 involving GIT_COMMON_DIR that broke
merging changes into adjusted branches.
.
git-annex (6.20170510) unstable; urgency=medium
.
* When a http remote does not expose an annex.uuid config, only warn
about it once, not every time git-annex is run.
* multicast: New command, uses uftp to multicast annexed files, for eg
a classroom setting.
* Added remote.<name>.annex-push and remote.<name>.annex-pull
which can be useful to make remotes that don't get fully synced with
local changes.
* Disable git-annex's support for GIT_SSH and GIT_SSH_COMMAND, unless
GIT_ANNEX_USE_GIT_SSH=1 is also set in the environment. This is
necessary because as feared, the extra -n parameter that git-annex
passes breaks uses of these environment variables that expect exactly
the parameters that git passes.
* enableremote: When enabling a non-special remote, param=value
parameters can't be used, so error out if any are provided.
* enableremote: Fix re-enabling of special remotes that have a git
url, so that eg, encryption key changes take effect. They were silently
ignored, a reversion introduced in 6.20160527.
* gcrypt: Support re-enabling to change eg, encryption parameters.
This was never supported before.
* git annex add -u now supported, analagous to git add -u
* version: Added "dependency versions" line.
* Keys marked as dead are now skipped by --all.
* annex.backend is the new name for what was annex.backends, and takes
a single key-value backend, rather than the unncessary and confusing
list. The old option still works if set.
.
git-annex (6.20170321) unstable; urgency=medium
.
* Bugfix: Passing a command a filename that does not exist sometimes
did not display an error, when a path to a directory was also passed.
* status: Propigate nonzero exit code from git status.
* Linux standalone builds put the bundled ssh last in PATH,
so any system ssh will be preferred over it.
* assistant: Add 1/200th second delay between checking each file
in the full transfer scan, to avoid using too much CPU.
* get -J: Improve distribution of jobs amoung remotes when there are more
jobs than remotes.
* fsck -q: When a file has bad content, include the name of the file
in the warning message.
* Windows: Improve handling of shebang in external special remote
program, searching for the program in the PATH.
* Drop support for building with old versions of dns, http-conduit,
directory, feed, and http-types.
* Windows: Fix bug in shell script shebang lookup code that
caused a "delayed read on closed handle" error.
* git-annex-shell: Fix bug when used with a recently cloned repository,
where "merging" messages were included in the output of configlist
(and perhaps other commands) and caused a "Failed to get annex.uuid
configuration" error.
* Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same
as they are by git. However, unlike git, git-annex sometimes needs to
pass the -n parameter when using these.
* sync --content-of=path (-C path) added for when you want to sync
only some files' contents, not the whole working tree.
.
git-annex (6.20170301.1) unstable; urgency=medium
.
* Fix reversion in yesterday's release that made SHA1E and MD5E backends
not work.
.
git-annex (6.20170301) unstable; urgency=medium
.
* No changes from 6.20170228; a new version number was needed due
to a problem with Hackage.
.
git-annex (6.20170228) unstable; urgency=medium
.
* Cryptographically secure hashes can be forced to be used in a
repository, by setting annex.securehashesonly.
This does not prevent the git repository from containing links
to insecure hashes, but it does prevent the content of such files
from being added to .git/annex/objects by any method.
* Tighten key parser to prevent SHA1 collision attacks generating
two keys that have the same SHA1. (Only done for keys that contain
a hash). This ensures that signed git commits of annexed files
will remain secure, as long as git-annex is using a secure hashing
backend.
* fsck: Warn about any files whose content is present, that don't
use secure hashes, when annex.securehashesonly is set.
* init: When annex.securehashesonly has been set with git-annex config,
copy that value to the annex.securehashesonly git config.
* Added --securehash option to match files using a secure hash function,
and corresponding securehash preferred content expression.
* sync, merge: Fail when the current branch has no commits yet, instead
of not merging in anything from remotes and appearing to succeed.
* Run ssh with -n whenever input is not being piped into it,
to avoid it consuming stdin that it shouldn't.
This fixes git-annex-checkpresentkey --batch remote,
which didn't output results for all keys passed into it. Other
git-annex commands that communicate with a remote over ssh may also
have been consuming stdin that they shouldn't have, which could have
impacted using them in eg, shell scripts.
* sync: Improve integration with receive.denyCurrentBranch=updateInstead,
displaying error messages from the remote then it fails to update
its checked out branch.
* Added post-recieve hook, which makes updateInstead work with direct
mode and adjusted branches.
* init: Set up the post-receive hook.
* sync: When syncing with a local repository located on a crippled
filesystem, run the post-receive hook there, since it wouldn't get run
otherwise. This makes pushing to repos on FAT-formatted removable
drives update them when receive.denyCurrentBranch=updateInstead.
* config group groupwanted numcopies schedule wanted required:
Avoid displaying extraneous messages about repository auto-init,
git-annex branch merging, etc, when being used to get information.
* adjust: Fix behavior when used in a repository that contains
submodules.
* Run wget with -nv instead of -q, so it will display HTTP errors.
* Run curl with -S, so HTTP errors are displayed, even when
it's otherwise silent.
* When downloading in --json or --quiet mode, use curl in preference
to wget, since curl is able to display only errors to stderr, unlike
wget.
* status: Pass --ignore-submodules=when option on to git status.
* config --set: As well as setting value in git-annex branch,
set local gitconfig. This is needed especially for
annex.securehashesonly, which is read only from local gitconfig and not
the git-annex branch.
* Removed support for building with the old cryptohash library.
Building with that library made git-annex not support SHA3; it's time
for that to always be supported in case SHA2 dominoes.
* git-annex.cabal: Make crypto-api a dependency even when built w/o
webapp and test suite.
.
git-annex (6.20170214) unstable; urgency=medium
.
* Increase default cost for p2p remotes from 200 to 1000.
This makes git-annex prefer transferring data from special
remotes when possible.
* Remove -j short option for --json-progress; that option was already
taken for --json.
* vicfg: Include the numcopies configuation.
* config: New command for storing configuration in the git-annex branch.
* annex.autocommit can be configured via git-annex config, to control
the default behavior in all clones of a repository.
* New annex.synccontent config setting, which can be set to true to make
git annex sync default to --content. This may become the default at
some point in the future. As well as being configuable by git config,
it can be configured by git-annex config to control the default
behavior in all clones of a repository.
* stack.yaml: Update to lts-7.18.
* Some optimisations to string splitting code.
* unused: When large files are checked right into git, avoid buffering
their contents in memory.
* unused: Improved memory use significantly when there are a lot
of differences between branches.
* Wormhole pairing will start to provide an appid to wormhole on
2021-12-31. An appid can't be provided now because Debian stable is going
to ship a older version of git-annex that does not provide an appid.
Assumption is that by 2021-12-31, this version of git-annex will be
shipped in a Debian stable release. If that turns out to not be the
case, this change will need to be cherry-picked into the git-annex in
Debian stable, or its wormhole pairing will break.
* Fix build with aws 0.16. Thanks, aristidb.
* assistant: Make --autostart --foreground wait for the children it
starts. Before, the --foreground was ignored when autostarting.
* initremote: When a uuid= parameter is passed, use the specified
UUID for the new special remote, instead of generating a UUID.
This can be useful in some situations, eg when the same data can be
accessed via two different special remote backends.
* import: Changed how --deduplicate, --skip-duplicates, and
--clean-duplicates determine if a file is a duplicate.
Before, only content known to be present somewhere was considered
a duplicate. Now, any content that has been annexed before will be
considered a duplicate, even if all annexed copies of the data have
been lost.
Note that --clean-duplicates and --deduplicate still check
numcopies, so won't delete duplicate files unless there's an annexed
copy.
* import: --deduplicate and --skip-duplicates were implemented
inneficiently; they unncessarily hashed each file twice. They have
been improved to only hash once.
* import: Added --reinject-duplicates.
* Added git template directory to Linux standalone tarball and OSX
app bundle.
* Improve pid locking code to work on filesystems that don't support hard
links.
* S3: Fix check of uuid file stored in bucket, which was not working.
* Work around sqlite's incorrect handling of umask when creating
databases.
Checksums-Sha1:
a3426ea1c0fc86589fd91f0e41ca633897fb0171 5065 git-annex_6.20170818-1.dsc
aa77c3d08f7b51a490fade3b24ac969151ed1dfc 5600816 git-annex_6.20170818.orig.tar.xz
3eaccf97513388e1351d613f4712fb35664ba29b 74696 git-annex_6.20170818-1.debian.tar.xz
82ea6267d732956abbbdc66684e1abd1e9d60e25 3947530 git-annex-dbgsym_6.20170818-1_amd64.deb
871aff858be1c7837d65b304e72bab28f5080ada 16429 git-annex_6.20170818-1_amd64.buildinfo
836021b04c1e0bd135c1c095fc988515f2547886 11194136 git-annex_6.20170818-1_amd64.deb
Checksums-Sha256:
98f5e5fc4dccc788d325b950cc7297350ed7f2bd2aa10fc0b5ba1c6be08e466d 5065 git-annex_6.20170818-1.dsc
b30a1a58652db4500d2e177a78ee677de7cdeb7c6dfbde3294fccc47ed671b04 5600816 git-annex_6.20170818.orig.tar.xz
c701500156c84741b501b2ada74ffe8026563a2b8bd65f5fbe3409f4849078dd 74696 git-annex_6.20170818-1.debian.tar.xz
0fc0916e90372e5022e8a0a4f0a51b618c2dcf97bc6818c11d4255657845937b 3947530 git-annex-dbgsym_6.20170818-1_amd64.deb
f42bcc7acf7e031e81b2aa928dba55943b2fae16eef6576766640598d34fec11 16429 git-annex_6.20170818-1_amd64.buildinfo
5e02dcdf516ec07e1f3230c9b2bbcab4005b53b462ea10f4b72987cf9f1346c6 11194136 git-annex_6.20170818-1_amd64.deb
Files:
af5b9ab2a64b6c3a60765e47b84fa838 5065 utils optional git-annex_6.20170818-1.dsc
a8ec8ac7d3946a68f30c498a8677cd31 5600816 utils optional git-annex_6.20170818.orig.tar.xz
a2c07ae920b1eed0a19cee0544e21cfa 74696 utils optional git-annex_6.20170818-1.debian.tar.xz
bab46c84fa4b74bfb82be49acad23846 3947530 debug extra git-annex-dbgsym_6.20170818-1_amd64.deb
3889d3a38d00681add87b1ddbba49656 16429 utils optional git-annex_6.20170818-1_amd64.buildinfo
3a4a565a4450e5d3ef68dbba7aa3928d 11194136 utils optional git-annex_6.20170818-1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=kE5h
-----END PGP SIGNATURE-----
